This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
File:                     bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json)
Hash identifier:          Ar1lXerKsmZBWgg++hcPMnVXn1MRPFD1flxOGUzYGEw=
Subject key identifier:   7B:F6:DD:EB:8F:4B:40:D7:2D:1C:17:91:8A:DA:C0:28:46:D9:02:50
Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
Certificate issuer:       /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
Manifest number:          0131
Signing time:             Fri 05 Dec 2025 02:44:56 +0000
Manifest this update:     Fri 05 Dec 2025 02:44:56 +0000
Manifest next update:     Fri 12 Dec 2025 02:44:56 +0000
Files and hashes:         1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: DT41RzQ9vj9C7LM2KBqGXEhYCSS3T1AS/1lzSJAjLAU=)
                          2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: svWCFcB6b/XkbZIPeHevXUk9kvL6MAqPQu9nAp05skM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
        Validity
            Not Before: Dec  5 02:44:56 2025 GMT
            Not After : Dec 12 02:44:56 2025 GMT
        Subject: CN=69324728-7953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:99:f6:88:8c:4a:da:21:c4:a4:e5:3f:f2:
                    cd:77:51:ea:d0:f1:0d:f6:45:88:56:77:24:01:1a:
                    99:c5:52:29:2a:78:61:0b:3d:da:80:78:48:8c:06:
                    a6:0b:5e:8d:0f:f1:9d:71:36:c1:6c:2e:ca:91:19:
                    0e:bc:de:86:9e:8e:39:d1:1a:2a:31:b3:9b:be:e9:
                    bc:78:a1:50:9c:96:87:7f:67:47:df:83:dc:61:ba:
                    55:e2:d1:30:30:a6:70:c4:7c:5e:3c:98:43:1a:fd:
                    43:f5:1e:fc:11:f3:44:4c:fa:ff:f7:ec:65:a9:0c:
                    dd:ce:5f:d1:51:f6:ae:2a:42:60:02:be:b9:32:47:
                    a2:f6:9c:e7:32:12:c6:3b:2f:a8:2c:c2:97:2b:44:
                    b5:fa:63:16:58:f1:a4:6e:18:ad:10:a6:d7:06:12:
                    23:cd:bc:09:3a:ae:a7:ff:bf:79:f7:f5:04:f4:3e:
                    22:ff:79:40:46:f8:38:8f:0a:5f:6e:eb:d5:87:7f:
                    61:71:27:40:50:58:4f:33:54:1c:d7:b5:d1:9b:53:
                    71:e0:70:a3:fd:65:80:01:28:f5:62:2c:80:83:6f:
                    3f:64:e9:48:e0:68:89:7d:0a:06:36:af:ce:24:e4:
                    90:36:19:52:1d:f3:76:03:10:68:22:30:aa:fd:29:
                    43:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:DD:EB:8F:4B:40:D7:2D:1C:17:91:8A:DA:C0:28:46:D9:02:50
            X509v3 Authority Key Identifier:
                keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:dd:12:2d:bc:61:4e:9e:53:16:16:13:5a:5f:2a:ff:35:
         8b:22:51:99:47:4c:46:e3:7a:ea:52:67:bf:0a:d8:f3:01:97:
         3f:02:ba:19:03:c9:5a:79:88:32:3a:6a:f1:c6:98:f9:6f:e5:
         a1:fa:26:ad:a0:01:d1:54:34:4f:2e:ea:8b:0f:57:b5:00:71:
         eb:eb:d4:42:e0:0f:45:d8:81:e9:70:50:53:f7:cf:65:b1:ad:
         4e:82:fa:5d:5d:32:56:5c:50:09:95:b6:0e:06:c9:72:72:24:
         02:98:cb:a0:11:2a:da:14:78:64:62:c3:a5:60:bc:8a:23:51:
         b7:ad:16:82:2b:c4:aa:c9:a6:36:6f:13:c7:a6:dd:b5:14:94:
         cb:4c:53:61:d4:b7:9b:42:64:ca:fe:14:0e:93:3f:52:81:ee:
         6c:ea:22:0a:e3:be:58:bb:b8:df:36:3e:16:c1:65:28:41:84:
         9b:c6:14:a1:17:aa:8a:02:a6:6c:fc:94:4a:88:8a:ac:65:32:
         3f:65:14:89:7b:d3:8b:1e:a0:77:30:6b:0e:cf:4d:8a:0b:27:
         71:89:3f:25:d7:1a:f7:d0:b0:08:f8:c7:a1:7d:15:83:48:b0:
         71:92:e0:fe:b5:6d:56:75:16:81:25:de:2a:13:f1:92:fb:df:
         97:3e:06:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:22:44 2025 by rpki-client